Fetching from the wire…
Top 5 · 2026-03-02 · source-backed
CVE-2026-21858 is an unauthenticated remote code execution in n8n, the popular workflow automation platform used by many teams to build LLM-powered agents. Content-Type confusion in webhook handling lets attackers forge uploads, read arbitrary files, forge admin sessions, and execute commands on the host. Affects ~100K servers globally. PoC is public. Fixed in v1.121.0. If you're using n8n as your agent orchestration backbone, this is a stop-everything-and-patch situation. CSO Online | Cyera Research
Each link below shares sources, entities, or timing with this story.
Simon Willison released LLM / Shared entity: LLM / Shared topic / What happened next
Linked by a graph relationship (Simon Willison released LLM); both cover LLM; overlapping topics (agent, automation, code, execute).
LLM uses OpenAI / Shared entity: RCE / Shared topic / What happened next
Linked by a graph relationship (LLM uses OpenAI); both cover RCE; overlapping topics (admin, agent, attacker).
Shared entities / Shared topic / Earlier coverage
Both cover Content, CVSS, Ni8mare, Type; overlapping topics (code, confusion, content-type, cve-2026-21858, cvss); earlier Content coverage from 2026-02-23.
Simon Willison released LLM / Shared entity: RCE / Shared topic / What happened next
Linked by a graph relationship (Simon Willison released LLM); both cover RCE; overlapping topics (agent, code).
LLM uses OpenAI / Shared entity: LLM / What happened next / Tension
Linked by a graph relationship (LLM uses OpenAI); both cover LLM; picks up the LLM thread on 2026-07-27.
LLM uses OpenAI / Shared entities / Shared topic / What happened next
Linked by a graph relationship (LLM uses OpenAI); both cover CVSS, PoC, RCE; overlapping topics (agent, attacker, cvss).
Simon Willison released LLM / Shared entity: LLM / What happened next / Tension
Linked by a graph relationship (Simon Willison released LLM); both cover LLM; picks up the LLM thread on 2026-06-19.
Linked by a graph relationship (Simon Willison released LLM); both cover LLM; picks up the LLM thread on 2026-06-18.